b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 11:03

Target
b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6.exe
Size 1.2MB
Sample241113-m5rt2atpcl
SHA256 b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6
MD5 ee8cdf5e9768138f055be7205aad522e
SHA1 7a696cd5e76bfbceedd4fe1ace7088501ba881ee
SHA512 225caf27b0dc56a2fe521c70252412bcd636e3be39305f50c78332e2dfbc02026f1b944223e8705ead3baa85c18e85f75bcb055210b800006d5ac98d8d7af21f
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszQEMr2Kog4O4t:GezaTF8FcNkNdfE0pZ9ozttwIRQCXf
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4036	b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6.exe
Token: SeLockMemoryPrivilege	4036	b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6.exe

C:\Users\Admin\AppData\Local\Temp\b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6.exe
"C:\Users\Admin\AppData\Local\Temp\b271d7ee111552e174dc10d87c855898ffd564d72c49ad5dad9a9a80e8baece6.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4036